Cyber Security Intelligence
Real-time aggregation of the most critical cybersecurity news, vulnerabilities, and threat warnings.
Latest Intel Feed
MFA's Weakest Link: Account Recovery Is the New Attack Path
For years, security teams have been making account takeover harder. Multi-factor authentication (MFA) added crucial protection to password-only authentication, while conditional access and device trust add further...
US says Chinese firms extracted billions of tokens from frontier AI models
U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. A joint advisory from CISA, NSA,...
Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure
Executive Summary A recent Unit 42 investigation into seemingly low-priority enterprise infections demonstrates how the most effective camouflage in cybercrime is not necessarily in the use of sophisticated techniques,...
New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser
Future phishing campaigns may no longer involve a detectable physical web page. Barracuda has analyzed a new type of phishing campaign that adds both stealth and flexibility to traditional phishing. Rather than standard...
Man gets 15 years for extorting women with AI-generated porn videos
An Ohio man was sentenced to 15 years in prison for multiple cybercrimes, including sextortion and cyberstalking of numerous victims using AI-generated sexually explicit content. [...]
Over 36,000 exposed Plex servers vulnerable to recent flaws
Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks. [...]
Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults
Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, or adult without exposing their exact date of birth. The new Windows Age API uses...
Italian tech collective Autistici/Inventati shuts down after US terrorist designation
Image: Hugo Clement via Unsplash/Photomosh Italian tech collective Autistici/Inventati shuts down after US terrorist designation The Italian technology collective Autistici/Inventati (A/I) announced Sunday it will shut...
Russian suspect in bank account takeovers is extradited to US
Image: Kindel Media via Pexels Russian suspect in bank account takeovers is extradited to US A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the...
CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro
CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro CIA cyber operators created a “flawless intelligence picture” that led to the capture of Venezuelan President Nicolás Maduro earlier this...
Scammer behind $245 million crypto heist pleads guilty to RICO charges
Cars and sneakers purchased with funds from a fraud ring run by Malone Lam. Image: Department of Justice Scammer behind $245 million crypto heist pleads guilty to RICO charges A Singaporean national pleaded guilty to...
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping...